wmic process where "name='java.exe'" get commandline > c:\commandline_output0.txt
wmic process where "name='powershell.exe'" get commandline > c:\commandline_output1.txt